@axorum/mcp 0.0.0-stage → 1.1.0

package/dist/config.js

@@ -0,0 +1,227 @@
+/**
+ * The server's configuration, read from the environment and checked before anything runs.
+ *
+ * An MCP server is launched by an agent host — Claude Code, Claude Desktop — as a
+ * subprocess speaking JSON-RPC over stdio. Nobody is watching its stdout. So a
+ * misconfiguration must not surface as a tool call failing strangely twenty minutes in;
+ * it must stop the process at startup with a message that names the variable, says what
+ * was wrong with it, and says what to set it to. That is what this module is for.
+ *
+ * @packageDocumentation
+ */
+import { readFileSync } from "node:fs";
+import { endpointSet } from "@axorum/client";
+/**
+ * The configuration was wrong, and the server will not start.
+ *
+ * Distinct from `@axorum/client`'s own `ConfigError`: this one is about *this process's
+ * environment*, and its message is written to be read by a human editing an MCP host's
+ * config file.
+ */
+export class ConfigurationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ConfigurationError";
+    }
+}
+/** The prefix every PASETO v4.public token carries. */
+const PASETO_V4_PUBLIC = "v4.public.";
+/** The default reader: the real filesystem, as UTF-8. */
+const readFileUtf8 = (path) => readFileSync(path, "utf8");
+/**
+ * Reads and validates the configuration from an environment.
+ *
+ * A **pure function** of `(env, readFile)` — which is the reason every one of its failure
+ * messages can be held to account by a unit test without setting a single real environment
+ * variable or writing a single real file.
+ *
+ * @param env - The environment. `process.env` in production.
+ * @param readFile - How to read `AXORUM_ATTESTATION_FILE`. Defaults to the filesystem.
+ * @throws {ConfigurationError} With a message that names the variable and says what to do.
+ */
+export function loadConfig(env = process.env, readFile = readFileUtf8) {
+    const base = baseUrl(env);
+    const config = {
+        baseUrl: base,
+        agentUri: agentUri(env),
+        attestation: attestation(env, readFile),
+        failoverUrls: failoverUrls(env, base),
+    };
+    // AXORUM_BEARER_TOKEN is retired: the agent plane now authenticates its reads with the
+    // attestation, not a transport bearer token. Warn to stderr rather than ignore a set-but-
+    // unused value silently — an operator who still has it set should be told it does nothing,
+    // not left believing a credential is in play that no longer is. (stderr, not stdout: stdout
+    // is the JSON-RPC channel.)
+    if (trimmed(env["AXORUM_BEARER_TOKEN"]) !== undefined) {
+        process.stderr.write("warning: AXORUM_BEARER_TOKEN is set but no longer used. The agent plane now " +
+            "authenticates with the attestation (AXORUM_ATTESTATION / AXORUM_ATTESTATION_FILE). " +
+            "Unset AXORUM_BEARER_TOKEN.\n");
+    }
+    const timeout = timeoutMs(env);
+    if (timeout !== undefined) {
+        config.timeoutMs = timeout;
+    }
+    return config;
+}
+/** The value of `name`, trimmed, or `undefined` if it is absent or blank. */
+function trimmed(value) {
+    const text = value?.trim();
+    return text === undefined || text === "" ? undefined : text;
+}
+/** `AXORUM_BASE_URL` — required, and an absolute `http`/`https` URL. */
+function baseUrl(env) {
+    const value = trimmed(env["AXORUM_BASE_URL"]);
+    if (value === undefined) {
+        throw new ConfigurationError("AXORUM_BASE_URL is not set. Set it to the root of your Axorum service, " +
+            "e.g. AXORUM_BASE_URL=http://127.0.0.1:8080 (the /api/v1 prefix is added for you).");
+    }
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new ConfigurationError(`AXORUM_BASE_URL is not a URL: '${value}'. Set it to an absolute URL, ` +
+            "e.g. AXORUM_BASE_URL=http://127.0.0.1:8080");
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        throw new ConfigurationError(`AXORUM_BASE_URL must be an http or https URL, but '${value}' is '${parsed.protocol}'. ` +
+            "Set it to e.g. AXORUM_BASE_URL=http://127.0.0.1:8080");
+    }
+    return value;
+}
+/** `AXORUM_AGENT_URI` — required, and an `agent://` URI. */
+function agentUri(env) {
+    const value = trimmed(env["AXORUM_AGENT_URI"]);
+    if (value === undefined) {
+        throw new ConfigurationError("AXORUM_AGENT_URI is not set. Set it to the agent:// URI this server acts as, " +
+            "e.g. AXORUM_AGENT_URI=agent://example.com/agent/clerk_01h455vb4pex5vsknk084sn02q. " +
+            "It must already be bound to a party in the ledger's registry.");
+    }
+    if (!value.startsWith("agent://")) {
+        throw new ConfigurationError(`AXORUM_AGENT_URI must be an agent:// URI, but it is '${value}'. ` +
+            "Set it to e.g. AXORUM_AGENT_URI=agent://example.com/agent/clerk_01h455vb4pex5vsknk084sn02q");
+    }
+    return value;
+}
+/**
+ * `AXORUM_ATTESTATION` or `AXORUM_ATTESTATION_FILE` — exactly one of them.
+ *
+ * Both being set is a hard failure rather than a precedence rule. Two sources of an
+ * agent's *authority to spend money* is precisely the configuration where a silent
+ * precedence rule sends the wrong credential and nobody finds out until the audit.
+ */
+function attestation(env, readFile) {
+    const inline = trimmed(env["AXORUM_ATTESTATION"]);
+    const file = trimmed(env["AXORUM_ATTESTATION_FILE"]);
+    if (inline !== undefined && file !== undefined) {
+        throw new ConfigurationError("AXORUM_ATTESTATION and AXORUM_ATTESTATION_FILE are both set, and they are two " +
+            "different claims about which credential this agent acts under. Unset one of them.");
+    }
+    if (inline === undefined && file === undefined) {
+        throw new ConfigurationError("Neither AXORUM_ATTESTATION nor AXORUM_ATTESTATION_FILE is set, so this agent has " +
+            "no proof it may act. Set one of them to a PASETO v4.public capability attestation " +
+            "(a token beginning 'v4.public.'), or a path to a file holding one. Mint one with: " +
+            "agent-uri attest issue --key <signing-key> --agent <uri> --agent-key <agent-public-key> --capability agent/post");
+    }
+    if (inline !== undefined) {
+        return verifyPasetoShape(inline, "AXORUM_ATTESTATION");
+    }
+    // `file` is a string here: the two branches above eliminated every other case.
+    const path = file;
+    let contents;
+    try {
+        contents = readFile(path);
+    }
+    catch (error) {
+        throw new ConfigurationError(`AXORUM_ATTESTATION_FILE points at '${path}', which could not be read: ${describe(error)}. ` +
+            "Check the path and its permissions.");
+    }
+    const token = contents.trim();
+    if (token === "") {
+        throw new ConfigurationError(`AXORUM_ATTESTATION_FILE points at '${path}', which is empty. It must hold a PASETO ` +
+            "v4.public capability attestation (a token beginning 'v4.public.').");
+    }
+    return verifyPasetoShape(token, `AXORUM_ATTESTATION_FILE ('${path}')`);
+}
+/**
+ * Checks the token *looks* like a PASETO v4.public — the shape, not the signature.
+ *
+ * The ledger is the authority on whether an attestation is valid, and it will say so with
+ * a `403`. This is here to catch the ordinary mistake — a path pasted into the inline
+ * variable, a base64 blob of the wrong thing — at startup, where the message can be
+ * actionable, rather than as an authority failure on the agent's first attempt to spend.
+ */
+function verifyPasetoShape(token, source) {
+    if (!token.startsWith(PASETO_V4_PUBLIC)) {
+        throw new ConfigurationError(`${source} does not hold a PASETO v4.public token: it must begin '${PASETO_V4_PUBLIC}', ` +
+            `but it begins '${token.slice(0, 12)}…'. Mint one with: ` +
+            "agent-uri attest issue --key <signing-key> --agent <uri> --agent-key <agent-public-key> --capability agent/post");
+    }
+    return token;
+}
+/** `AXORUM_TIMEOUT_MS` — optional, and a positive integer number of milliseconds. */
+function timeoutMs(env) {
+    const value = trimmed(env["AXORUM_TIMEOUT_MS"]);
+    if (value === undefined) {
+        return undefined;
+    }
+    // `Number` rather than `parseInt`: `parseInt("30s")` is 30, which is exactly the typo a
+    // config check exists to catch.
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new ConfigurationError(`AXORUM_TIMEOUT_MS must be a positive whole number of milliseconds, but it is '${value}'. ` +
+            "Set it to e.g. AXORUM_TIMEOUT_MS=30000, or unset it to use the default of 30000.");
+    }
+    return parsed;
+}
+/**
+ * `AXORUM_FAILOVER_URLS`, optional: every other replica's service root, comma-separated,
+ * e.g. `https://axorum-1:8443,https://axorum-2:8443`. Each must be a bare `http(s)` origin
+ * on `AXORUM_BASE_URL`'s scheme, and no two may name the same origin, by the same rules
+ * `@axorum/client` holds its `failoverUrls` to. Unset or blank, the list is empty.
+ */
+function failoverUrls(env, base) {
+    const value = trimmed(env["AXORUM_FAILOVER_URLS"]);
+    if (value === undefined) {
+        return [];
+    }
+    const urls = value.split(",").map((url) => url.trim());
+    const blank = urls.indexOf("");
+    if (blank !== -1) {
+        throw new ConfigurationError(`AXORUM_FAILOVER_URLS has an empty entry at position ${blank + 1}: '${value}'. List ` +
+            "every other replica's service root, comma-separated, e.g. " +
+            "AXORUM_FAILOVER_URLS=https://axorum-1:8443,https://axorum-2:8443");
+    }
+    const set = endpointSet(base, urls);
+    if ("refusal" in set) {
+        throw new ConfigurationError(`AXORUM_FAILOVER_URLS is refused: ${refusalText(set.refusal, urls)}`);
+    }
+    return urls;
+}
+/**
+ * Why `@axorum/client` refuses a failover list, in this server's terms. `index` counts the
+ * base URL as 0, so failover URL `index` is `urls[index - 1]`. Pure.
+ */
+function refusalText(refusal, urls) {
+    switch (refusal.kind) {
+        case "not_an_origin":
+            return (`'${refusal.url}' is not a bare http(s) origin: ${refusal.reason}. Give each ` +
+                "replica's scheme, host and port only, e.g. https://axorum-1:8443");
+        case "mixed_scheme":
+            return (`'${urls[refusal.index - 1] ?? ""}' uses ${refusal.found}, but AXORUM_BASE_URL uses ` +
+                `${refusal.expected}. Every replica must be reached on one scheme.`);
+        case "duplicate_origin": {
+            const first = refusal.first === 0 ? "AXORUM_BASE_URL" : `'${urls[refusal.first - 1] ?? ""}'`;
+            return (`'${urls[refusal.duplicate - 1] ?? ""}' names the same replica (${refusal.origin}) as ` +
+                `${first}. List each replica once.`);
+        }
+    }
+}
+/** The best available prose for a thrown value, without assuming it is an `Error`. */
+function describe(error) {
+    if (error instanceof Error) {
+        return error.message === "" ? error.name : error.message;
+    }
+    return String(error);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,WAAW,EAA2B,MAAM,gBAAgB,CAAC;AAuBtE;;;;;;GAMG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAKtC,yDAAyD;AACzD,MAAM,YAAY,GAAa,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CACxB,MAAyB,OAAO,CAAC,GAAG,EACpC,WAAqB,YAAY;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,MAAM,GAMR;QACF,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC;QACvB,WAAW,EAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;QACvC,YAAY,EAAE,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC;KACtC,CAAC;IAEF,uFAAuF;IACvF,0FAA0F;IAC1F,2FAA2F;IAC3F,4FAA4F;IAC5F,4BAA4B;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8EAA8E;YAC5E,qFAAqF;YACrF,8BAA8B,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,KAAyB;IACxC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3B,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,wEAAwE;AACxE,SAAS,OAAO,CAAC,GAAsB;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAC1B,yEAAyE;YACvE,mFAAmF,CACtF,CAAC;IACJ,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,KAAK,gCAAgC;YACrE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,kBAAkB,CAC1B,sDAAsD,KAAK,SAAS,MAAM,CAAC,QAAQ,KAAK;YACtF,sDAAsD,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4DAA4D;AAC5D,SAAS,QAAQ,CAAC,GAAsB;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAC1B,+EAA+E;YAC7E,oFAAoF;YACpF,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,kBAAkB,CAC1B,wDAAwD,KAAK,KAAK;YAChE,4FAA4F,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAsB,EAAE,QAAkB;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAErD,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAC1B,gFAAgF;YAC9E,mFAAmF,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAC1B,mFAAmF;YACjF,oFAAoF;YACpF,oFAAoF;YACpF,iHAAiH,CACpH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACzD,CAAC;IAED,+EAA+E;IAC/E,MAAM,IAAI,GAAG,IAAc,CAAC;IAC5B,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAC1B,sCAAsC,IAAI,+BAA+B,QAAQ,CAAC,KAAK,CAAC,IAAI;YAC1F,qCAAqC,CACxC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,kBAAkB,CAC1B,sCAAsC,IAAI,2CAA2C;YACnF,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,EAAE,6BAA6B,IAAI,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,MAAc;IACtD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,kBAAkB,CAC1B,GAAG,MAAM,2DAA2D,gBAAgB,KAAK;YACvF,kBAAkB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB;YACzD,iHAAiH,CACpH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAAC,GAAsB;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,wFAAwF;IACxF,gCAAgC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,kBAAkB,CAC1B,iFAAiF,KAAK,KAAK;YACzF,kFAAkF,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAsB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,kBAAkB,CAC1B,uDAAuD,KAAK,GAAG,CAAC,MAAM,KAAK,UAAU;YACnF,4DAA4D;YAC5D,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,OAA2B,EAAE,IAAuB;IACvE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,CACL,IAAI,OAAO,CAAC,GAAG,mCAAmC,OAAO,CAAC,MAAM,cAAc;gBAC9E,kEAAkE,CACnE,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,CACL,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,OAAO,CAAC,KAAK,6BAA6B;gBACrF,GAAG,OAAO,CAAC,QAAQ,gDAAgD,CACpE,CAAC;QACJ,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC;YAC7F,OAAO,CACL,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,EAAE,6BAA6B,OAAO,CAAC,MAAM,OAAO;gBACvF,GAAG,KAAK,2BAA2B,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/convert.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The border crossing: validated tool input becomes a wire `IntentDraft`.
+ *
+ * Everything in here is a **pure function**. The tool callbacks in `server.ts` do I/O and
+ * cannot be reasoned about without a service; this module holds the part that *can* be —
+ * the lifting of decimal strings into `bigint`s, which is the step where a
+ * financial-control server most needs to be right, and the step a test can pin down
+ * exactly.
+ *
+ * @packageDocumentation
+ */
+import type { ActionTerm, Amount, Entry, IntentDraft, UsageMove, Value } from "@axorum/client";
+import type { ServerConfig } from "./config.js";
+import type { AmountInput, EntryInput, SubmitIntentInput, UsageMoveInput, ValueInput } from "./schemas.js";
+/**
+ * Lifts a validated amount's `minor` from a decimal string into a `bigint`.
+ *
+ * `BigInt()` cannot throw here: the schema's `INTEGER` pattern has already established
+ * that the string is a bare integer literal, which is exactly what `BigInt` parses.
+ */
+export declare function toAmount(input: AmountInput): Amount;
+/** Lifts a validated journal leg. */
+export declare function toEntry(input: EntryInput): Entry;
+/**
+ * Lifts a validated typed value into its wire form.
+ *
+ * The variants that carry integers — `Int`, `Tick` — and the one that carries money —
+ * `Amount` — are lifted; the rest are already exactly what the wire wants. The `in` checks
+ * discriminate the externally tagged union by its single key.
+ */
+export declare function toValue(input: ValueInput): Value;
+/** Lifts a validated usage move, its signed delta included. */
+export declare function toUsageMove(input: UsageMoveInput): UsageMove;
+/** Lifts a validated action term and its bindings. */
+export declare function toActionTerm(input: SubmitIntentInput["action"]): ActionTerm;
+/**
+ * Builds the draft the client submits, from what the model asked for and how this server
+ * is configured.
+ *
+ * The split is the point: **the model supplies the intent, the configuration supplies the
+ * identity.** A model cannot choose which agent it is or what attestation it holds — those
+ * come from the environment an operator set, and are not in the tool's input schema at
+ * all. There is no argument a model can pass to make this server act as somebody else.
+ *
+ * The policy pin is absent for the same reason: it is a claim about the *service's* state,
+ * not the agent's, and `submitPinned` stamps it from the service's own answer.
+ */
+export declare function toDraft(input: SubmitIntentInput, config: ServerConfig): IntentDraft;
+//# sourceMappingURL=convert.d.ts.map

package/dist/convert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"convert.d.ts","sourceRoot":"","sources":["../src/convert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE/F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,cAAc,EACd,UAAU,EACX,MAAM,cAAc,CAAC;AAEtB;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAEnD;AAED,qCAAqC;AACrC,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,CAEhD;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,CAWhD;AAED,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CAE5D;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,GAAG,UAAU,CAM3E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,GAAG,WAAW,CAoCnF"}

package/dist/convert.js

@@ -0,0 +1,102 @@
+/**
+ * The border crossing: validated tool input becomes a wire `IntentDraft`.
+ *
+ * Everything in here is a **pure function**. The tool callbacks in `server.ts` do I/O and
+ * cannot be reasoned about without a service; this module holds the part that *can* be —
+ * the lifting of decimal strings into `bigint`s, which is the step where a
+ * financial-control server most needs to be right, and the step a test can pin down
+ * exactly.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Lifts a validated amount's `minor` from a decimal string into a `bigint`.
+ *
+ * `BigInt()` cannot throw here: the schema's `INTEGER` pattern has already established
+ * that the string is a bare integer literal, which is exactly what `BigInt` parses.
+ */
+export function toAmount(input) {
+    return { minor: BigInt(input.minor), currency: input.currency };
+}
+/** Lifts a validated journal leg. */
+export function toEntry(input) {
+    return { account: input.account, side: input.side, amount: toAmount(input.amount) };
+}
+/**
+ * Lifts a validated typed value into its wire form.
+ *
+ * The variants that carry integers — `Int`, `Tick` — and the one that carries money —
+ * `Amount` — are lifted; the rest are already exactly what the wire wants. The `in` checks
+ * discriminate the externally tagged union by its single key.
+ */
+export function toValue(input) {
+    if ("Int" in input) {
+        return { Int: BigInt(input.Int) };
+    }
+    if ("Tick" in input) {
+        return { Tick: BigInt(input.Tick) };
+    }
+    if ("Amount" in input) {
+        return { Amount: toAmount(input.Amount) };
+    }
+    return input;
+}
+/** Lifts a validated usage move, its signed delta included. */
+export function toUsageMove(input) {
+    return { usage: input.usage, amount: toAmount(input.amount) };
+}
+/** Lifts a validated action term and its bindings. */
+export function toActionTerm(input) {
+    const bindings = {};
+    for (const [name, value] of Object.entries(input.bindings ?? {})) {
+        bindings[name] = toValue(value);
+    }
+    return { action: input.action, bindings };
+}
+/**
+ * Builds the draft the client submits, from what the model asked for and how this server
+ * is configured.
+ *
+ * The split is the point: **the model supplies the intent, the configuration supplies the
+ * identity.** A model cannot choose which agent it is or what attestation it holds — those
+ * come from the environment an operator set, and are not in the tool's input schema at
+ * all. There is no argument a model can pass to make this server act as somebody else.
+ *
+ * The policy pin is absent for the same reason: it is a claim about the *service's* state,
+ * not the agent's, and `submitPinned` stamps it from the service's own answer.
+ */
+export function toDraft(input, config) {
+    const draft = {
+        agent: config.agentUri,
+        attestation: config.attestation,
+        action: toActionTerm(input.action),
+        entries: input.entries.map(toEntry),
+        justification: input.justification,
+    };
+    // Assigned conditionally: `exactOptionalPropertyTypes` distinguishes an absent key from
+    // a present-`undefined` one, and `IntentDraft.transaction` being absent is what tells
+    // the client to mint an id.
+    if (input.transaction !== undefined) {
+        draft.transaction = input.transaction;
+    }
+    if (input.fulfills !== undefined) {
+        draft.fulfills = input.fulfills;
+    }
+    if (input.evidence !== undefined) {
+        draft.evidence = input.evidence;
+    }
+    // Same rule, and it matters more here: the contract says an intent that carries no usage
+    // move omits the key **entirely**, never `null`. A model that fills in two of the three
+    // must not have the third invented for it.
+    if (input.consume_usage !== undefined) {
+        draft.consume_usage = toUsageMove(input.consume_usage);
+    }
+    if (input.meter_usage !== undefined) {
+        draft.meter_usage = toUsageMove(input.meter_usage);
+    }
+    if (input.bill_usage !== undefined) {
+        draft.bill_usage = toUsageMove(input.bill_usage);
+    }
+    return draft;
+}
+//# sourceMappingURL=convert.js.map

package/dist/convert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"convert.js","sourceRoot":"","sources":["../src/convert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAaH;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAkB;IACzC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;AAClE,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,OAAO,CAAC,KAAiB;IACvC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,KAAiB;IACvC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;QACnB,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CAAC,KAAqB;IAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,KAAkC;IAC7D,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,OAAO,CAAC,KAAwB,EAAE,MAAoB;IACpE,MAAM,KAAK,GAAgB;QACzB,KAAK,EAAE,MAAM,CAAC,QAAQ;QACtB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QACnC,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;IAEF,wFAAwF;IACxF,sFAAsF;IACtF,4BAA4B;IAC5B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED,yFAAyF;IACzF,wFAAwF;IACxF,2CAA2C;IAC3C,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,KAAK,CAAC,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `@axorum/mcp` — the official Axorum MCP server.
+ *
+ * It exposes the Axorum agent plane as MCP tools, so that any MCP-capable agent — Claude
+ * Code, Claude Desktop, anything else that speaks the protocol — becomes an
+ * Axorum-governed spender with no integration code written.
+ *
+ * ## The thesis
+ *
+ * It is safe to hand a language model money-moving tools **precisely because** Axorum sits
+ * underneath, refusing what the policy in force forbids and recording the refusal. The
+ * guardrail is not a prompt asking the model to be careful. It is a ledger that will not
+ * post what it is not permitted to post.
+ *
+ * Which is why a refusal here is a **result, not an error**. It comes back as an ordinary
+ * tool result — `isError` unset — leading with a plain-language verdict line the model
+ * reads and adapts to. `isError` is reserved for the cases where the ledger never got to
+ * answer at all: a misconfigured server, an unreachable service, a pin that would not hold.
+ *
+ * ## Running it
+ *
+ * Normally you do not import this package — you run the `axorum-mcp` binary and let an MCP
+ * host talk to it over stdio. The exports here are for embedding the server in a host
+ * process, and for the tests.
+ *
+ * @packageDocumentation
+ */
+export { ConfigurationError, loadConfig, type ReadFile, type ServerConfig } from "./config.js";
+export { SERVER_INFO, createServer } from "./server.js";
+export { toActionTerm, toAmount, toDraft, toEntry, toValue } from "./convert.js";
+export { describeRecord, postedFlag, renderError, renderOutcome, renderResult, renderText, verdictLine, } from "./render.js";
+export { toJsonText } from "./json.js";
+export { INTEGER, REFERENCE_SETS, actionSchema, amountSchema, entrySchema, getBalanceShape, getObligationsShape, getTransactionShape, submitIntentShape, valueSchema, type AmountInput, type EntryInput, type SubmitIntentInput, type ValueInput, } from "./schemas.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/F,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EACL,cAAc,EACd,UAAU,EACV,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EACL,OAAO,EACP,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,34 @@
+/**
+ * `@axorum/mcp` — the official Axorum MCP server.
+ *
+ * It exposes the Axorum agent plane as MCP tools, so that any MCP-capable agent — Claude
+ * Code, Claude Desktop, anything else that speaks the protocol — becomes an
+ * Axorum-governed spender with no integration code written.
+ *
+ * ## The thesis
+ *
+ * It is safe to hand a language model money-moving tools **precisely because** Axorum sits
+ * underneath, refusing what the policy in force forbids and recording the refusal. The
+ * guardrail is not a prompt asking the model to be careful. It is a ledger that will not
+ * post what it is not permitted to post.
+ *
+ * Which is why a refusal here is a **result, not an error**. It comes back as an ordinary
+ * tool result — `isError` unset — leading with a plain-language verdict line the model
+ * reads and adapts to. `isError` is reserved for the cases where the ledger never got to
+ * answer at all: a misconfigured server, an unreachable service, a pin that would not hold.
+ *
+ * ## Running it
+ *
+ * Normally you do not import this package — you run the `axorum-mcp` binary and let an MCP
+ * host talk to it over stdio. The exports here are for embedding the server in a host
+ * process, and for the tests.
+ *
+ * @packageDocumentation
+ */
+export { ConfigurationError, loadConfig } from "./config.js";
+export { SERVER_INFO, createServer } from "./server.js";
+export { toActionTerm, toAmount, toDraft, toEntry, toValue } from "./convert.js";
+export { describeRecord, postedFlag, renderError, renderOutcome, renderResult, renderText, verdictLine, } from "./render.js";
+export { toJsonText } from "./json.js";
+export { INTEGER, REFERENCE_SETS, actionSchema, amountSchema, entrySchema, getBalanceShape, getObligationsShape, getTransactionShape, submitIntentShape, valueSchema, } from "./schemas.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAoC,MAAM,aAAa,CAAC;AAE/F,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EACL,cAAc,EACd,UAAU,EACV,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EACL,OAAO,EACP,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,GAKZ,MAAM,cAAc,CAAC"}

package/dist/json.d.ts

@@ -0,0 +1,35 @@
+/**
+ * JSON for a model to read — and the one rule that keeps it from throwing.
+ *
+ * The Axorum ledger denominates money in 128-bit integer minor units, and `@axorum/client`
+ * decodes every JSON integer as a **`bigint`** so that a large one survives the trip. That
+ * is the right call on the wire, and it puts one hazard in this server's path:
+ * `JSON.stringify` **throws a `TypeError`** on a `bigint`. Not truncates — throws.
+ *
+ * Every outcome, balance, obligation and transaction record this server hands back is
+ * riddled with them. So nothing here calls `JSON.stringify` bare; everything goes through
+ * {@link toJsonText}, which writes a `bigint` as a **quoted decimal string**.
+ *
+ * Quoted, not bare. On the wire the ledger wants a bare integer literal, and the client's
+ * own serializer emits one. But this text is not going on a wire — it is going to a
+ * language model, which reads it as text and may well hand it back to us as text. A quoted
+ * `"50000"` is exact and unambiguous at any magnitude; a bare `50000` invites the model
+ * (and any JSON tool it pipes through) to round-trip it as an IEEE-754 double and silently
+ * lose the low bits of a large one. Mis-stating a balance is the one thing a
+ * financial-control server must never do, so this reads the amounts back as strings.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Serializes a value to indented JSON text, safely, whatever `bigint`s it holds.
+ *
+ * A pure function, and the **only** JSON writer in this package — see the module docs for
+ * why a bare `JSON.stringify` is a latent crash here rather than a style preference.
+ *
+ * @param value - Anything, `bigint`s and all.
+ * @returns Indented JSON text. `undefined` — which `JSON.stringify` renders as the
+ *   *absence* of a value rather than as text — becomes `"null"`, because a caller writing
+ *   this into a content block needs a string, not a hole.
+ */
+export declare function toJsonText(value: unknown): string;
+//# sourceMappingURL=json.d.ts.map

package/dist/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../src/json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD"}

package/dist/json.js

@@ -0,0 +1,41 @@
+/**
+ * JSON for a model to read — and the one rule that keeps it from throwing.
+ *
+ * The Axorum ledger denominates money in 128-bit integer minor units, and `@axorum/client`
+ * decodes every JSON integer as a **`bigint`** so that a large one survives the trip. That
+ * is the right call on the wire, and it puts one hazard in this server's path:
+ * `JSON.stringify` **throws a `TypeError`** on a `bigint`. Not truncates — throws.
+ *
+ * Every outcome, balance, obligation and transaction record this server hands back is
+ * riddled with them. So nothing here calls `JSON.stringify` bare; everything goes through
+ * {@link toJsonText}, which writes a `bigint` as a **quoted decimal string**.
+ *
+ * Quoted, not bare. On the wire the ledger wants a bare integer literal, and the client's
+ * own serializer emits one. But this text is not going on a wire — it is going to a
+ * language model, which reads it as text and may well hand it back to us as text. A quoted
+ * `"50000"` is exact and unambiguous at any magnitude; a bare `50000` invites the model
+ * (and any JSON tool it pipes through) to round-trip it as an IEEE-754 double and silently
+ * lose the low bits of a large one. Mis-stating a balance is the one thing a
+ * financial-control server must never do, so this reads the amounts back as strings.
+ *
+ * @packageDocumentation
+ */
+/** Writes a `bigint` as a quoted decimal string; passes everything else through. */
+function bigintToString(_key, value) {
+    return typeof value === "bigint" ? value.toString() : value;
+}
+/**
+ * Serializes a value to indented JSON text, safely, whatever `bigint`s it holds.
+ *
+ * A pure function, and the **only** JSON writer in this package — see the module docs for
+ * why a bare `JSON.stringify` is a latent crash here rather than a style preference.
+ *
+ * @param value - Anything, `bigint`s and all.
+ * @returns Indented JSON text. `undefined` — which `JSON.stringify` renders as the
+ *   *absence* of a value rather than as text — becomes `"null"`, because a caller writing
+ *   this into a content block needs a string, not a hole.
+ */
+export function toJsonText(value) {
+    return JSON.stringify(value, bigintToString, 2) ?? "null";
+}
+//# sourceMappingURL=json.js.map

package/dist/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../src/json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,oFAAoF;AACpF,SAAS,cAAc,CAAC,IAAY,EAAE,KAAc;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC;AAC5D,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+/**
+ * The `axorum-mcp` binary: an MCP server speaking JSON-RPC over stdio.
+ *
+ * An MCP host — Claude Code, Claude Desktop — launches this as a subprocess and talks to
+ * it on stdin/stdout. Two consequences shape this file:
+ *
+ * 1. **stdout is the protocol.** Not a log. A stray `console.log` anywhere in this process
+ *    corrupts the JSON-RPC stream and the host sees a broken server. Every diagnostic here
+ *    goes to stderr, which is where the host collects logs.
+ *
+ * 2. **Nobody is watching.** There is no terminal, and no human waiting to read a stack
+ *    trace. So a bad configuration is caught *here*, before a transport exists, and
+ *    reported as prose that names the variable and says what to set it to — and the process
+ *    exits non-zero, so the host reports a failure to start rather than a server that
+ *    accepts tool calls and fails all of them.
+ *
+ * @packageDocumentation
+ */
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/main.js

@@ -0,0 +1,41 @@
+#!/usr/bin/env node
+/**
+ * The `axorum-mcp` binary: an MCP server speaking JSON-RPC over stdio.
+ *
+ * An MCP host — Claude Code, Claude Desktop — launches this as a subprocess and talks to
+ * it on stdin/stdout. Two consequences shape this file:
+ *
+ * 1. **stdout is the protocol.** Not a log. A stray `console.log` anywhere in this process
+ *    corrupts the JSON-RPC stream and the host sees a broken server. Every diagnostic here
+ *    goes to stderr, which is where the host collects logs.
+ *
+ * 2. **Nobody is watching.** There is no terminal, and no human waiting to read a stack
+ *    trace. So a bad configuration is caught *here*, before a transport exists, and
+ *    reported as prose that names the variable and says what to set it to — and the process
+ *    exits non-zero, so the host reports a failure to start rather than a server that
+ *    accepts tool calls and fails all of them.
+ *
+ * @packageDocumentation
+ */
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { ConfigurationError, loadConfig } from "./config.js";
+import { createServer } from "./server.js";
+async function main() {
+    const config = loadConfig(process.env);
+    const server = createServer(config);
+    await server.connect(new StdioServerTransport());
+    // stderr, never stdout: stdout carries JSON-RPC and nothing else.
+    process.stderr.write(`axorum-mcp: serving ${config.agentUri} against ${config.baseUrl}\n`);
+}
+main().catch((error) => {
+    if (error instanceof ConfigurationError) {
+        // The expected failure, and the one a human can act on. No stack trace — the message is
+        // the whole of what they need, and a trace would bury it.
+        process.stderr.write(`axorum-mcp: ${error.message}\n`);
+        process.exit(1);
+    }
+    const message = error instanceof Error ? (error.stack ?? error.message) : String(error);
+    process.stderr.write(`axorum-mcp: failed to start: ${message}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IAEjD,kEAAkE;IAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,MAAM,CAAC,QAAQ,YAAY,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;AAC7F,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;QACxC,wFAAwF;QACxF,0DAA0D;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,OAAO,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}